Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/He2JlpI8ZQczhJIlNayJhBNlxwU.roa
File: He2JlpI8ZQczhJIlNayJhBNlxwU.roa (raw, json)
Hash identifier: OuIaHjgCyPaNpYLqQNHE7OPzaKT6XbasSd79mJXSO/M=
Subject key identifier: 1D:ED:89:96:92:3C:65:07:33:84:92:25:35:AC:89:84:13:65:C7:05
Certificate issuer: /CN=72e6e725d58f10273b5d32d0b06390ddd8424d73
Certificate serial: 019F23688DB94B05558477FC5C74F335CDD8
Authority key identifier: 72:E6:E7:25:D5:8F:10:27:3B:5D:32:D0:B0:63:90:DD:D8:42:4D:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cubnJdWPECc7XTLQsGOQ3dhCTXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/He2JlpI8ZQczhJIlNayJhBNlxwU.roa
Signing time: Thu 02 Jul 2026 15:18:02 +0000
ROA not before: Thu 02 Jul 2026 15:18:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212983
IP address blocks: 2001:67c:1308::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cubnJdWPECc7XTLQsGOQ3dhCTXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:8d:b9:4b:05:55:84:77:fc:5c:74:f3:35:cd:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e6e725d58f10273b5d32d0b06390ddd8424d73
Validity
Not Before: Jul 2 15:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ded8996923c65073384922535ac89841365c705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:8c:89:da:22:b6:ec:96:64:3d:af:a2:10:fe:
2e:a8:90:21:34:ca:d5:60:84:3b:08:ce:8d:05:d8:
66:62:fe:c0:dc:65:a1:03:94:f8:40:4b:97:c6:55:
e0:ae:20:4f:69:d0:25:56:4e:91:e0:53:bf:7f:9f:
55:72:38:26:5e:ef:ee:95:8d:8c:ba:67:e6:75:d9:
7d:a3:1c:b2:53:4e:46:b6:0b:b9:11:98:9d:40:fd:
46:dd:db:40:46:8a:d2:b8:cd:43:67:57:02:ae:30:
1d:30:79:68:66:2b:cb:af:7e:fc:8d:3e:83:6f:28:
df:b7:54:65:28:d1:80:04:22:7e:41:0f:06:0c:96:
b3:aa:2b:fa:f4:f5:3d:46:60:47:dc:6d:ce:fe:10:
80:18:09:73:7f:c1:e8:ee:e0:82:0f:67:13:db:19:
0a:e1:bc:2b:f7:ed:cc:d2:20:bd:e0:c4:f7:1b:69:
d6:b4:14:25:b5:23:98:00:28:fd:b8:40:e0:35:00:
eb:9e:8f:c3:db:c8:78:3b:04:c5:c5:51:c8:01:d7:
3e:ce:0b:4c:c0:0e:c7:e1:ce:85:a3:ae:fa:3a:64:
13:c5:24:53:5c:89:16:ca:78:b7:c5:fa:94:e2:66:
28:1d:c2:9c:d7:3f:79:2e:58:7e:4d:3a:fb:a4:d0:
cd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:ED:89:96:92:3C:65:07:33:84:92:25:35:AC:89:84:13:65:C7:05
X509v3 Authority Key Identifier:
keyid:72:E6:E7:25:D5:8F:10:27:3B:5D:32:D0:B0:63:90:DD:D8:42:4D:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cubnJdWPECc7XTLQsGOQ3dhCTXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/He2JlpI8ZQczhJIlNayJhBNlxwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/cubnJdWPECc7XTLQsGOQ3dhCTXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1308::/48
Signature Algorithm: sha256WithRSAEncryption
31:36:3a:a7:b5:19:57:ec:a8:b5:fa:bc:5a:00:8e:e9:71:ea:
cc:18:cc:bd:be:e3:a5:e6:a2:89:b1:4e:a2:86:80:f7:95:07:
72:d8:b5:ea:0c:41:0b:a4:25:f1:84:73:0b:66:a4:27:64:cf:
15:69:03:3d:27:3c:be:24:c6:f0:b4:e9:57:80:bf:62:c8:c3:
fe:ff:da:ff:16:d1:2b:de:70:a6:b6:93:00:a6:8c:79:c5:46:
6b:d2:e6:50:5d:03:b4:1d:bc:26:e4:63:3d:c0:25:39:33:de:
db:76:52:5f:8a:73:d3:32:03:71:3d:dc:6a:4b:98:9a:48:c1:
d0:bc:b2:0f:56:7d:ea:1e:d8:26:04:d3:4d:de:bb:23:46:7d:
7d:ec:c2:47:6e:f3:8b:5c:77:39:68:ba:53:8e:67:15:56:a9:
11:ff:80:c1:70:1c:c7:e3:c3:69:46:67:51:9e:ee:7c:2b:0e:
a5:70:89:c6:ba:78:85:06:d9:57:bd:60:eb:f7:5a:04:71:bc:
5c:de:98:af:ec:61:e8:79:16:11:3a:d7:a7:2c:05:6a:e2:bc:
fd:62:41:e9:b1:8b:62:46:c8:ae:d7:0d:12:9b:77:a4:e4:30:
82:90:0f:39:52:b4:11:20:a2:cb:e9:d4:7b:43:6e:c0:e6:52:
34:6a:8e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:58:11 2026 by rpki-client